a52e657422b5742850eed02bddbafd1c2e8dba3b1dba2593f13044cdd24d401d

Analysis

max time kernel
156s
max time network
151s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
12/06/2024, 19:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a52e657422b5742850eed02bddbafd1c2e8dba3b1dba2593f13044cdd24d401d.apk
Size 1.8MB
Sample240612-x7anmsxblc
SHA256 a52e657422b5742850eed02bddbafd1c2e8dba3b1dba2593f13044cdd24d401d
MD5 9264cb14da400cb03d9253262127e017
SHA1 0cd46a6aa971e819d27a691e92d0ef4549dc8e61
SHA512 21d36f63459e4595d5f7e3a4e1b2def151110ac4a748612058ead7eff7dc245e4c63a1474ebe3c428c1db976c08c5ebc0d5878f432c37876033f2d70a5d4abab
SSDEEP 24576:1bY1MUjhSTvjH11kJub+9RLpR9caZQ9bp1xWdkuDE5Uwh+Pj2OeHiKncvRIMD7rV:VY1wp1kJY0RLpR0bTE1EPh+Pz5RbbPJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5045

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 7c5ae03ecda2f5c9894154ad575750e268ca101f1d896e21ce7ec4bf4bc358e5
MD5 f08855afdb91e32525bfa7726ee16ba1
SHA1 021e780d91e4298abd70b4db9374feb905901614
SHA512 519728dcf0fca641df89e059e4dc678c589f62e84abee89a43638b20a86012ade40080a60abb5c7464cf5d83865a4bb46ee8e63ee1e79bfa1e15311bb4cfe4ed
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 4f1f634fa87918a0f321fb3971e05efbf52219f0e223231dd069ed808cd5d860
MD5 9d51322eee80610b71a83136e8f3eb06
SHA1 e9cc2829b8afe919a90640f904c7ec51fcdc4646
SHA512 3f6083f4f678244648b6f4b9e902bd03956c3472082bba49652e4f39db385f7d1b2e9711cc69b3e325ca47d00d7a7ec210615dbec7f83048a88fdd52adafed04
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 47ddab04b5b8fc724300c51e0a64e67da82a095ae0508efe71f420668b8f8779
MD5 60a82bbb9a59b92fbac90d2931dc966e
SHA1 b144521a14b998367f992a8f1c9308c12801b02b
SHA512 70beac49b104532f9eb88e0553f299f096849c18733ae830766cd76d8d13d909bf7bbe5ac5519568ae4341743c5c8c5b3716fe5cac5f401eb1e04f2dff1846cc
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 2d2848e2ea0851fb6478f9a4af48c82b9da18f2f6a9de2993e3eee3aca3e3e87
MD5 65cec07f7d41a4ad058907a087dbc1dc
SHA1 3c6398f16f0f6895260224a06ee1ebd05c64540b
SHA512 f7d2f3c08675e9b09c4d274d540393d57f791ec49d6f7c1c6b55385a81dde79a1cee7d2314c286e6d7f7d3f9eae80124519398302abdc6c6f0f437885c83bc13
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads